How can I see a list of all users who access Exchange via the Outlook Web Access (OWA)?
June 26, 2009 – 5:24 amIf you inspect the IIS web service logs you’ll will see all the access logs, which include source IP address and username. This file is very cumbersome, however. A friend of mine, Tim McCarty, used the LOGPARSER tool with a little T-SQL script to take the data and reformat into a more digestible format. To make sure logs are enabled check, the Web Site tab of the default web site, as shown here. Click to expand.
First, save the following as UsersofOWA.sql Select date as [Date], time as [Time], s-ip as [Server IP], cs-username as [UserName], c-ip as [Client-IP], cs-method as [Request Verb], cs-uri-stem as [Request URI] FROM \\D:\sources\logs \OWALogins.csv
Once you have the CSV file, you can see information such as unique users using Microsoft Excel’s remove duplicates functionality. You can also tune the above commands and formats to get the format you want.
Full info here
